CVE-2026-12503

CriticalCVSS 9.2

Published: 24/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in `/usr/bin/larm_starter` in Loytec devices (L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, L-PAD) up to version 8.4.16 on LINX-A64 allows an authenticated `larmapp` attacker to escalate privileges to root via a symlink attack on `/etc/lighttpd/ssl/server.pem`.

Risk Assessment

An attacker can gain full root access to the device, leading to complete system compromise and access to all data.

Recommendation

Apply firmware updates from Loytec. Restrict `larmapp` user privileges and monitor for abnormal symbolic links.

Original NVD description (English source)

Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated `larmapp` attacker to make `/etc/passwd` writable by the `larmapp` group (leading to root privilege escalation) via a symlink attack on `/etc/lighttpd/ssl/server.pem`.